# Android T650P PED Connection and Firewall Requirements

HTML version: [Android T650P PED Connection and Firewall Requirements](https://support.gladstonesoftware.cloud/hardware/android-t650p-ped-connection-and-firewall-requirements)

## Problem
Verifone T650P payment terminals require specific network and firewall configurations to successfully connect to Verifone’s POS Cloud payment platform. Users need to ensure that all required connections are enabled for payment processing, device management, and essential background functions. Without these connections, payment processing and other terminal features may not function correctly.

## Resolution

1. **DNS Resolution**
   - Allow outbound traffic on TCP port 53 and TCP port 853.
   - Configure access to Google DNS servers: `8.8.4.4` and `8.8.8.8`.

2. **Payment Processing**
   - Permit HTTPS traffic to:
     - `https://gsc.verifone.cloud/api/v1`
   - Ensure that both of the following IP addresses are whitelisted:
     - `178.21.210.130`
     - `178.21.211.130`
   - DNS queries to `gsc.verifone.cloud` may resolve to either IP address; static whitelisting for both is strongly advised.

3. **POSCloud WebSocket Connectivity**
   - Allow WebSocket connections to:
     - `wss://emea-pos.gsc.verifone.cloud/poscloud`

4. **Time Synchronisation**
   - Permit HTTP access to:
     - `http://time.verifone.cloud/v1/time`
   - For geolocation-based time services, allow HTTPS access to:
     - `https://prod.sf.vfcarbon.com:443/android-proxy/v1/geolocate`

5. **Logging Services**
   - Allow HTTPS traffic to:
     - `https://cgateway-core.verifone.com:443/latest/logs`
   - Ensure forwarding through:
     - `cgateway.verifone.com`

6. **Online Connectivity Checks**
   - Allow HTTP access to:
     - `http://time.verifone.cloud/v1/online`

7. **Captive Portal Connectivity Checks**
   - Permit access to:
     - `http://www.google.com/gen_204`
     - `https://www.google.com/gen_204`

8. **Device Management (VHQ)**
   - Allow HTTPS access to:
     - `https://vhq2.vfims.com/MessagingServer/MessageHandler.asmx`
     - `vhq.verifone.com`
     - `vhqhome.verifonehq.net`

## Notes

- Unlike previous integrations, Verifone T650P devices **do not require a direct connection** to Gladstone360 POS Hardware Service on local PCs. They only need connectivity to Verifone POS Cloud services.
- Background functions enabled via these connections include payment processing, time synchronisation, log uploads, external connectivity checks, and device management.
- Network/firewall administrators should review this list to ensure all routes are open to avoid connection and processing issues with the devices.